CVE-2018-20445

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-12-25 · updated 2026-06-17
Weakness: CWE-522

Description

D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32 and iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32 SNMP requests.

Affected products

Dlink Dcm-604 Firmware: dcm604_c1_viacabo_1.04_20130606
Dlink Dcm-704 Firmware: eu_dcm-704_1.10

References

https://misteralfa-hack.blogspot.com/2018/12/d-link-passwords-wireless-via-snmp.html
https://misteralfa-hack.blogspot.com/2018/12/d-link-passwords-wireless-via-snmp.html

Get alerted when CVE-2018-20445 or the next vulnerability affects your stack